Vulnerability in Ezupload

CVE-2005-2616

Multiple PHP file include vulnerabilities in ezUpload 2.2 allow remote attackers to execute arbitrary code via the path parameter to (1) initialize.php, (2) customize.php, (3) form.php, or (4) index.php.

EPSS: 0.115 (95.6th percentile) — read the EPSS interpretation.

Affected products

  • Ezupload — versions 2.2
  • N/a — versions n/a

References